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-\ can be blurred, or spediic faces can be blurred. In one aspect of the invention, a particular face is blurred on an image or on a series 
2 of images in a video. Faces are determined in an image, and face matching is performed to match a particular face to faces in the 

image. If a match is found, the face or a portion of the face is blurred in the image. The blurring is performed on a portion of the 
Q image containing ttie particular fecc. Blmring may be performed through a variety of techniques. In another aspect of the invention, 
J>. voice processing is used as an adjunct to or in place of face analysis lo determine if a face in an image or series of images should be 
!^ btoed. In another aspect of the invention, alt fiices or human skin in an image or series of images is blurred. 
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Method and apparatas for automatic face blurring 



PCT/IB02/04819 



The present invention relates to image processing tBchmques, and more 
particularly, to a mefliod and apparatus for automatically blurring faces and human skin in 
images. 



Cameras are becoming ubiquitous in public and private areas. In public areas, 
cameras are being used for a variety of different and seemingly unrelated situations. For 
instance, retail stores use cameras to reduce shoplifting by customers and employees. As 
another exanqjle, many cities have cameras located at particular intersections or on particular 
10 hi^ways, thereby providing real-time images of traffic. Additionally, anolha: use for 
cameras in public places is face identification, which has been used at public events to 
capture wairted criminals. 

Cameras ate also becoming more popular in private areas, such as the home. 
Homemakers are using cameras to ensure that their children are properly cared for or for 
1 5 home security and surveillance purposes. Additionally, cameras are being integrated into 
home security systems, such lhat images from within a house can be transmitted to a 
monitoring facility if a home security system determines that something is amiss and that 
images should be sent. 

The presence of cameras in these areas implicates privacy concerns. For 
20 example, in a shoplifting scenario, a criminal might be caught on video. However, other 
innocent shoppers may also be shown on the same video, and these people just happened to 
, be in the store at the same time as the criminal. In a home situation, an intruder could enter 
the house when a security system is armed. The intruder, along with residents and guests in 
the house, could be caught in an hnage. 
25 In these situations, there are people other than the criminal that are being 

shown on video. These people may or may not want to have their likeness on these videos. 

There are some efforts to maintain privacy. For instance, on the television 
show "Cops," passersby and other individuals will have their faces blurred while the criminal 
and the police will not This provides a way for bystanders to be blocked &om view while the 
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criminal, and any others allowing tfaeir likeness to be used, is not However, this binning is 
manually added to images in a video. This is a relatively long and tedious task. 

A need therefore exists for a method and apparatus for automatically 
modifying an image sequence to contain blurred facial images for those selected individuals, 
such as those people who do not wish to have their identity known. 

Generally, an image processing system is disclosed that provides automatic 
fece or skin blurring for images. All faces or skin can be blurred, or specific faces can be 
blurred. 

In one aspect of the invention, a particular face is blurred on an image or on a 
series of images m a video. Faces are determined in an image, and face recognition is 
performed to match a particular face to feces in the image. If a match is foimd, tiie fece or a 
portion of the fece is blurred m the image. The blurring is performed on a portion of the 
image oontaming the particular face. Blurring may be perfcmned fhrou^ a variety of 
techniques. 

ha another aspect of the invention, voice processing is used as an adjunct to or 
in plaoe of face analysis to determine if a face in an image or series of images should be 
blurred. 

3h another aspect of the invention, all faces or human skin in an unage or 
series of images is blurred. 

A more complete understanding of the present invention, as well as further 
features and advantages of the present invention, will be obtained by reference to the 
following detailed description and drawings. 

FIG. 1 illustrates an exeirqjiary image processing system in accordance with 
the present invention; 

FIG. 2 illustrates a global view of the operations performed in accordance with 
the present invention; 

FIG. 3 is a flow chart describing an exemplary implementation of the audio 
analysis process of FIG. 1; 

FIG. 4 is a flow chart describing an exemplary implementation of the facial 
analysis process of FIG. 1; and 
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FIG. 5 is a flow chart describing an exemplary inqjlemeutation of the blmring 
process of FIG. 1. 



5 FIG. 1 illustrates aa exemplary image processing system 100 in accordance 

wifli the present invention. According to one aspect of the present invention, the image 
processing system 100 interacts with input audio 1 10, input video 120, and Digital Versatile 
Disk (DVD) 160, and produces output video 150. 

The image processing system 1 00 may be embodied as any computing device, 

10 such as a personal computer or workstation, containing a processor 130, such as a central 
processing unit (CPU), and memory 140, such as Ilandom Access Memory (RAM) and 
Read-Only Memory (ROM). In an alternate embodiment, the image processing system 100 
disclosed herein can be inq>lemented as an appUcation specific integrated circuit (ASIC), for 
example, as part of a video processing systean. As shown in FIG. 1 , and discussed furtiier 

1 5 below in conjunction with FIGS. 3 through 5, respectively, the memory 1 40 of the image 
processing system 100 includes an audio analysis process 300, a facial analysis process 400, 
and a blurring process 500. As known in the art, the processes 300, 400, and 500 can be 
combined into one process or made into even smaller procMses. The processes 300, 400, and 
500 are separated herein 6x ease of description and understanding. 

20 Input audio 1 10 and input video 120 will usually be genesrated by a single 

camera with an attached microphone. However, the input audio 1 10 and input video 120 can 
be generated by separate devices. Additionally, input audio 110 is optional. Generally, input 
audio 110 and input video 120 will be digital. However, one or both of these signals can also 
be analog and image processing system 100 can use well known techniques to digitize the 

25 signals. 

Generally, the audio analysis process 300 analyzes input audio 110 to 
determine if one or more particular speakers are speaking. If it is determined that one or more 
of the particular speakers are speaking, then all faces or potentially all human skin in an 
image or sequence of images is blurred. Additionally, a face, in an image, that corresponds to 
30 the particular speaker can be blurred and tracked. Audio analysis also helps facial analysis 
because, if a particular speaker is found, the facial analysis then can start wifli the premise 
that a face for the particular speaker should be found in the image. 

The facial analysis process 400 determines human faces in images. The facial 
analysis process 400 determines locations in images for aU human faces and can determine 
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particular faces. Optionally, the fecial analysis process 400 can detennine the presence of 
hmnan skin in images. The blurring process 500 blurs regions of images. The blurring 
process 500 will essentially blur regions of images containing particular faces, all faces, or all 
skin. 

5 As is known in the art, the methods and apparatus discussed herein may be 

distributed as an article of manufacture that itself comprises a computer readable medium 
having computer readable code means embodied thereon. The computer readable program 
code means is operable, in conjunction with a computer system, to carry out all or some of 
the steps to perform the methods or create the apparatuses discussed herein. The computer 
10 readable medium may be a recordable meddiim (e.g., floppy disks, hard drives, compact disks 
such as DVD 160, or memory cards) or may be a transmission medium (e.g., a network 
conq)rising fSber-optics, the world-wide web, cables, or a wireless chamiel using time- 
division multiple access, code-division multiple access, or other radio-frequency chamiel). 
Any medium known or developed that can store information suitable for use with a computer 
1 5 system may be used. The computer-readable code means is any mechanism for allowing a 
computer to read instructionB and data, such as magnetic variations on a magnetic media or 
hedglht variations on the surface of a compact disk, such as DVD 160. 

Memory 140 vmU configure the processor 130 to implement the methods, 
steps, and functions disclosed herein. The memory 140 could be disteibuted or local and the 
20 processor 130 could be distributed or singular. The memory 140 could be implemwited as an 
electrical, magnetic or optical memory, or any combination of these or other types of storage 
devices. The term "memory" should be construed broadly enough to encompass any 
information able to be read jfrom or written to an address in the addressable space accessed by 
processor 130. With this definition, information on a aetworic is still within memory 140 of 
25 the image processing system 100 because the processor 130 can retrieve the information from 
the network. 

FIG. 2 illustrates an illustrative global view of the operations performed by the 
present invention. As shown in FIG. 2, audio analysis process 300 accepts and analyzes input 
audio 110, using voice information 230. Audio analysis process 300 is described in detail in 
30 reference to FIG. 3. Voice information 230 allows audio analysis process 300 to determine if 
particular speakers are in input video 120. For instance, for a home security system, voices 
from inhabitants of the home will be collected for storage in the voice information 230 
repository. For other systems, any person or persons who wish to have their privacy protected 
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through the face bltixring techniques of the present mvention can have their voice infijrmation 
stored in voice infonnation 23 0. 

When audio analysis process 300 determines that all or a portion of audio 
input 110 belong to one of the particular speakers, the audio analysis process 300 provides 
5 this information to facial analysis process 400. Facial analysis process 400 is described m 
more detjul in reference to FIG. 4. 

Facial analysis process 400 analyzes input video 120, which comprises a series 
of images 121, 122, and 123 in this example. Facial analysis process 400 examines each 
image 121, 122, and 123 to detennme faces ui the image and the locations and, generally, the 
10 approximate size of the faces. The facial anal^^s process 400 may also determine particular 
faces in &e unage. Optionally, the facial analysis process may simply examine images 121, 
122, and 123 to search for human skin. 

To detennine specific faces in images 121, 122, and 123, facial analysis 
process 400 uses fecial information 240. The facial analysis process 400 provides data to 
1 5 blurring process 500 to inform blurring process 500 what regions of an hn&ge to blur. 

Bhming process is described in greater detail in refereiice to FIG. 5. Bhnring process 500 
then blurs specific regions of each unage 121, 122, and 123. In this manner, blurring process 
500 produces output video 150, which comprises images 221, 222,and 223. Output video 150 
comprises images that have regions blurred, if certain condition are met. 
20 hi the example of HG. 2, hnage 221 has region 220 blurred, hnage 121 is a 

representation of an image before blurring takes place, and image 221 is a representation of 
this same image after blurring has been performed by blurring process 500. Region 220, in 
this example, blurs all of the face 210, However, portions, such as the eyes, of the face may 
be blrared instead. Additionally, all human sldn in an image may be blurted, if deshed. 
25 FIG. 3 is a flow chart describing an exemplary hnplementation of the audio 

analysis process 300. As previously indicated, the audio analysis process 300 analyzes input 
audio 110, using voice information 230, to determine if specific speakers are in images. 
Generally, audio analysis process 300 performs speaker identification by using audio. There 
are a variety of techniques for speaker identification through audio. Each of tbe following 
30 U.S. Patents describes speaker identification by using audio, and each of these is hereby 

incorporated by reference: U.S. Patent No. 6,246, 987, entitled "System for permitting access 
to a common resource in response to speaker identification and verification"; U.S. Patent No. 
6,233,555, entitled "Method and Apparatus for Speaker Identification Using Mixture 
Discriminant Analysis to Develop Speaker Models"; U.S. Patent No, 6,141,644, entitied 
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"Speaker Vraificatian and Speaker Identification Based on Eigenvoices"; U.S. Pateit No. 
6,029,124, entitled "Sequential, Nonparametric Speech Recognition and Speaker 
Identification"; and U.S. Patent No. 5,946,654, entitled "Sp^ker Identification Using 
Unsuparised Speech Models." 

MethodSlO starts in step310, when Ihe input audio 110 is analyzed. 
Generally, methods for speaker identiScation extract some type of infiMmation ftom the 
audio 110 (step 310), and this extracted information is compared (step 320) with stored voice 
information 230 from a speaker to determine a match within some predetennined accuracy. 
For instance, in U.S. Patsit 6,233,555, the voice information 230 is derived 
from two phases. In the enroUment phase a password utterance from a speaker is received 
multiple times. A transcription of the password utterance as a sequence of phones is obtained, 
and the phone string is stored in a database containing phone strings of otiier speakers in the 
group. In the training phase, the first set of feature vectors are extracted from each password 
utterance and the phone boundaries for each phone in the password trmiscription are obtained 
using a speaker independent phone recognizer. A mixture model is developed for each phone 
of a given password from a speaker. Then, using the feature vectors from the password 
utterances of all of the speakers in the group, transformation parameters and transformed 
models are generated for each phone and speaker, using mixture discriminant analysis. The 
transformation parameters and transformed models are stored as voice information 230. 

The process in U.S. Patent 6,233,555 then continues as follows. An utterance 
from a speaker is received from input audio llOandasequenceof a first set of feature 
vectors are computed based on the received utterance (step 310). The first set of feature 
vectors are then transformed mto a second set of feature vectors using transformations 
specific to a particular segmentation unit (step 310), and likelihood scores of the second set 
of feature vectors are computed usirig speaker models (stored in voice information 230) 
trained using mixture discriminant analysis (step 310). The likelihood scores are then 
combined to determine an utterance score and the identity of a speaker is validated based on 
the utterance score (step 320). 

Those skilled in the art will realize that tiiere are a variety of techniques 
suitable for speaker identification. 

If an audio signature is found (step 330 = YES), which means that a speaker 
has been identified withm a predetermined degree of accuracy, then information that 
indicates a particular speaker is ou^ut. This occurs in step 340. 
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It may be that it is possible to track a single speaker. For instance^ if a camera 
is able to view an entire room where only one person is speaking, then the audio anal^s 
could determine fliat the audio is fiom a speaker whose voice information has been stored in 
voice information 230. Once the ideatity of the speaker is determined, it is possible to use 
5 tracking techniques to track the person while the person remains m view of a camera. 

It is also possible to determine that a person or persons in a room do not 
correspond to people who have fhcir voice information stored in voice information 230. If 
another person enters the room whose audio signature can be deterarined in step 320, a 
system can then use tracking techniques to track this pei^n. One commonly used tracking 
10 technique models the background, then determines what objects are moving by comparing 
new images witii the modeled background. Such a technique is described in Elgammal A., 
Harwood D. and Davis h., "Non-Parametric Model for Background Subtraction " Proc. of the 
6th European Conf. on Computer Vision, 751-767, Dublm, Ireland, June/July 2000, the 
disclosure of which is incorporated herein by reference. 
15 In these simations, particular individual mformation 340 can include who the 

person is and what time he or she entered the view of a camera. This will help tihe facial 
analysis techniques, to be discussed below, beca^ise one or more people will be known to be 
present in the view of a camera. 

Optionally, ia step 340, the fact that a particular speaks was found is output 
20 mstead of specific infbimation about the person. This situation is particularly useful if all 

faces are to be blurred if the voice signahire of one person is found. The latter can be a setting 
that a user can enable or disable. 

If all of the voice information for all mdividuals have not been examined (step 
350 =■ NO), then the audio analysis process 300 proceeds again in step 310. Optionally, step 
25 3 10 is perfonned once each tune audio analysis process 300 is performed, and step 350 
begms again m step 320. If all the information for all individuals have not been examined 
(step 350 = NO), then the audio analysis process 300 stops. 

As shown in FIG. 4, the facial analysis process 400 begms m step 405, whai it 
is determined if a user has selected the option of blurring all faces in images. If this option 
30 has been selected (step 405 = YES), all faces are detected m step 410. The face detection may 
be performed in accordance with the teachings described in, for example, Intemational Patent 
W09932959, entitled "Method and System for Gesture Based Option Selection " assigned to 
the assignee of the present invention, Damian Lyons and Daniel Pelletier, "A Line-Scan 
Computer Vision Algorithm for Identifying Human Body Features," Gesture'99, 85-96 
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France (1999), Miag-Hsuan Yang and Narendra Ahaja, "Detecting Human Faces in Color 
Images " Proc. of tiie 1998 IEEE M'l Conf. on Image Processing QCJP 98), Vol. 1, 127-130, 
(October, 1998); and I. Haritaoglu, D. Harwood, L. Davis, "Hydra: Multiple People 
Detection and Tracking Using Silhouettes," Computer Vision and Pattern Recognition, 
5 Second Workshop of Video Surveillance (CVPR, 1999), each incorporated by reference 
herein. 

Many of these techniques require training, where the training is performed by 
having a camera view of an empty room to determine base data. Faces and movement are 
then more easily determined. These techniques are well known to those skilled in the art. 
10 Detecting all faces 41 0 can be made easier by using previously stored 

locations of feces 415. Every time facial analysis process 400 can store current locations of 
feces in storage 415 and then use these locations when the fecial analysis process 400 is 
executed the next time. 

Once all feces are found in step 410, the "locations" and areas of feces are 
15 estimated. The estimated locations are generally central locatians of an outline of the fece, 
and the outline of the face generally corresponds to the esthnated area. The estimated 
locations can be influenced by user input 425. For escample, a user could choose to have step 
420 use ellipses to estimate areas of the face. The location of the face is then the oenter point 
of an ellipse and the ellipse can be tilted in such a way as to encompass the entire fece. 
20 Techniques for estimating head tilt and other parameters are given in the U.S. Patent 
application having serial number 09/898,139, entitled "Method and Apparatus for 
Interleaving a User Image in an Original Image Sequence," filed on July 3, 2001, by Gutta et 
al., the disclosure of which is incorporated by reference herein. 

As another example, a user may wish to have area estimated with rectangles or 
25 other shapes. Rectangles may be useful, for instance, to ensure that the face and part of the 
hair are blurred in subsequent stages. As with ellipses, rectangles and other shapes can be 
appropriately tilted to provide the best estimate of facial area. 

After step 420, die facial analysis process 400 outputs blurring information m 
step 460. Such blurring information includes positions and are^ of all faces, where the area 
30 is generally described through mathematical shapes such as ellipses or rectangles. 

If tiie option to blur all faces is disabled (step 405 = NO), then face 
information is retrieved from fecial information repository 240. This occurs in step 430. In 
step 435, relevant faces are identified. A "relevant" face is simply a fece that is to be blurred 
if the face is found to a predetermined degree of accuracy in an image. Generally, step 435 
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comprises two steps: face detection and then face recognition. For this version of step 435, 
generally movement is detected first, which involves backgroimd analysis, then do face 
detection on the object is performed. Another technique, which may be used m step 435, is to 
classify a object in the image and detennine that Ifae object is a human being. Classification 
of objects is described in Srinivas Gutta and Vasanth Pbilomin, "Classification of Objects 
through Model Ensembles," U.S. Serial No. 09/794443, filed February 27, 2001, the 
disclosure of which is incorporated by reference herein. After it is determined that the object 
is human, the system can detect a face and recognize ttie face. 

As described above, there are a variety of techniques for face detection. There 
are also a variety of techniques for face recognition. The face recognition may be performed 
in accordance wilh the teachings described in, for example, Antonio Cohnenarez and Thomas 
Huang, *TStoximmn Likelihood Face Detection," 2nd Iht'l Conf. on Face and Gesture 
Recognition, 307-311. Killingtrai. Vermont (October 14-16, 1996) or Srinivas Gutta et aL, 
"Face and Gesture Recognition Using Hybrid Classifiers," 2d Jnt'l Con£ on Face and 
Gesture Recognition, 164-169, KilUngton, Vermont (October 14-16, 1996), incorporated by 



Audio analysis data 445, which is the output of audio analysis process 300, 
can also be used to detemune that there is at least one person whose face should be blurred. 
This information can also contain information on who the person is. This enables step 435 to 
more easily perform face recognition. Additionally, if there is only one face in the view of the 
camera, then face recognition need not be perfonned. It should be noted that audio analysis 
data 445 may indicate that all faces are to be blurred once the audio signature of a single 
person is found. In this case, step 435 will act to find all faces and step 450 will act to provide 
location and area information for all faces. 

It should also be noted that facial analysis process 400 can be simpHfied in 
certain situations by using previous locations of relevant faces 440. This will reduce the 
amount of processing by step 435 because the current location of a relevant face should be 
close to the previous location of a relevant fece. 

In step 450, the locations and areas of relevant faces are estimated and output 
information for relevant feces is output in step 460. Note that there may be no output 
information if no relevant faces are found. Method facial analysis process 400 then ends after 
step 460. 

It should be noted that method 400 can optionally be used to determine human 
slcin and then to blur the sldn. This could be helpful, for instance, if a person in a video is 
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inappropriately dressed. An exemplary way of modifying method 400 to blur human sldtt is 
as follows. In step 405, it is determined that all human skin is to be blurred. In step 410, all 
human skin is found in an image. Hnman skin can be found through various techniques, such 
as the techniques described m Forsyth and Fleck, "Identifying Nude Pictures," Proc. of the 

5 Third IEEE Workshop, Appl. of Computer Vision, 1 03-108, Dec. 2-4, 1996, the disclosure of 
which is incorporated by reference herein. Step 410 can use previously stored location 415. 

En step 420, locations and areas of the human skin are determined, and this 
step may be affected by user preferences 425. The locations and areas are output in step 460. 
Again, it is possible to use shapes to describe the areas of the unage containing skin. 

10 Alternatively, it is also possible, in step 460, to create an output that will cause certain pixels 
in the image to be blurred For example, a bitmtq;) could be created that contains one bit for 
every pixel in the image could be created, where a "1" in the bitmap indicates that the pixel is 
to be bhtired and a "0" in the unage indicates that the pixel is not to be bhured. The present 
invention can use any technique suitable for indicating which pixels in an image should be 

15 blurred. 

FIG. 5 is a flow chart describing an exemplary implementation of the blurring 
process 500. As previously indicated, the blumng process 500 blurs regions of an image. 
Generally, these regions of the image correspond to faces. Blurring process 500 begins in 
step 510, when blurring information is received. Such blumng mformation generally 

20 comprises sets of locations and areas. The locations are generally the center point of the area, 
and the area is generally described mathematically. This mathematics can include shapes and 
orientations for the shapes. 

In step 520, the blurring process 500 blurs regions of an image by using the 
blurring information. The regions can be modified by user input. For mstance, a user can 

25 make the region be larger or smaller, or can choose different shapes. Previous blurring 

information is stored in previously blurred areas storage 525. This storage can be used to save 
user settings and to provide a "blur-only image" that can be combined with an input image to 
more easily provide the output blurred image. The blur-only image maps to the input image 
and provides locations to be blurred or perh^ pixel data to add to or subtract from the pixels 

30 that already exist. 

Additionally, the user bspxst 425 can provide information on how the blurring 
should be performed. As is known in the art, there are a variety of techniques usefid for 
blurring. For instance, an average could be determined from certain pixels. The average is 
then output to the pixels to be blurred. 
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It is to be understood that the embodiments and variations shown and 
described herein are merely illustrative of the principles of this invention and that various 
modifications may be implemaited by those skilled in the art without dq)arting firom the 
scope and spirit of the invention. 
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1 . A method cotnpiisuig: 

- analyzing an image (121, 122, 123) using image processing tedmiques to 
find human skin (e.g.. 210) in the image (121, 122, 123); and 

- blurring a region (e.g., 220) of the image (121, 122, 123) containing at least a 
S portion of the human skin (e.g., 210). 

2. The method of claim 1, wherein the human skin (e.g., 210) is part of a human 

face (210). 

10 3 . The method of claim 1 , wherein: 

- the step of analyzing further comprises analyzing an image (121, 122, 123) to 
find all human skin (e.g., 210) in the image (1 21 , 122, 123); and 

- the step of blurring further comprises the step of blurring each region (e.g., 
220) of the image (121, 122, 123) that contains hmnan skin (e.g., 210). 

15 

4. A method comprising: 

- analyzing an image (121, 122, 123) to determine at least one face (210) in the 
image (121, 122, 123); and 

- blmring at least one region (e.g., 220) of the image (121, 122, 123) 
20 containing at least a portion offbeat least one face (210). 

5. The method of claim 4, y^erein: 

- the at least one face (210) comprises a plurality of faces; 

- the step of analyzing flirther comprises the step of identifying at least one 
25 relevant face (2 1 0) from the plurality of faces; and 

- the stiep of blurring flirther comprises blmring a region (e.g., 220) of the 
image (121, 122, 123) containing at least aportion of the at least one relevant face (210). 



6 . The method of claim 4, wherein: 
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- the image (121, 122, 123) is one image (121, 122, 123) in a series of images 
from a video (120); 

- the method further comprises tiiie step of detensiiiiing if sound in audio (1 10) 
corresponding to the video (120) can be assigned to a relevant person; and 

- flie step of blurring fUrther comprises the step of blurring regions of each of 
the images when the audio (1 10) corresponds to a relevant person, each of the regions 
comprising one of the at least one faces, such that all feces in the images are blmred. 

7 . The method of claim 4, whwein: 

- the image (121, 122, 123) is one image (121, 122, 123) in a series of images 
from a video (120); 

- the method ftirtha: conq)rises the step of determining if somid in audio (1 10) 
corresponding to the video (120) can be assigned to a relevant person; and 

- the step of blurring further con^nises the step of blurring a region (e.g., 220) 
of each of the images when ttie audio (1 10) concsponds to a relevant person, each of the 
regions comprising a face (210) that corresponds to the relevant person. 

8. The method of claim 4, wherein a particular region (e.g., 220) comprises a 
face (210), and wherein the step of blurring further comprises blmring aportioai of the region 
(e.g., 220) Where the entire face (210) is blurred. 

g The method ofclaim 4, vdierein the step ofanalyzing&rfher comprises the 

step of detEamining, for each face (210) in the image (121, 122, 123), a location of the fece 
(210). 

10. The method of claim 9, wherem the step of determining a location fiirther 
comprises the step of determining, for each location, an area. 

11. The method of claim 10, wherein each area comprises a shape. 

12. The method of claun 4, wherein; 

the at least one face (210) comprises a plurality of faces; 
the step of analyzmg finther con^rises the step of identifying regions in the 
image (121, 122, 123) wherein the plurality effaces exist; and 
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the step of bluirmg fiirfher comprises blurring each of the regions so that each 
of the plurality of :^es is blnired. 

13. A system comprising: 

5 a memory (140) that stores computer-readable code; and 

a processor (130) operatively coupled to said memory (140), said processor 
configured to inclement said computer-readable code, said computer-readable code 
configured to: 

analyze an image (121, 122, 123) to determine at least one specified human 
10 body feature in the image (121, 122, 123); and 

blur at least one region (e.g., 220) of the image (121, 122, 123) containing at 
least a portion of the at least one specified human body feature. 

14 The system of claim 13, wherein the at least one specified human body feature 

15 comprises aportionofa face (210). 

15, An article of manufacture comprising: 

a computer-readable medium (e.g., 160) having computer readable code means 
embodied thereon, said computer-readable program code means comprising: 
20 a step to analyze an image (121, 122, 123) to determine at least one specified 

human body feature in the image (121, 122, 123); and 

a st^ to blur at least one region (e.g., 220) of the image (121 , 122, 123) 
containing at least a portion of the at least one specified human body feature. 
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